Search: “initial-access”

5 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 11 Malware 9 Exploit / PoC 5 Vulnerability 4 Threat actor 4 Phishing & fraud 3 AI safety & security 2 Data breach 2 Policy & legal 1 Industry 1

SeverityAll critical 18 high 15 medium 7 low 0 info 2

Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild

Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel and Plesk backup plugins, exploited in targeted attacks.

Acronis released fixes for CVE-2026-87886 (CVSS 7.8, CWE-276), an insecure file permissions flaw in Linux-based backup components for cPanel & WHM and Plesk that enables local privilege escalation. The vendor observed limited, targeted exploitation in the wild before patches shipped. Fixes are available in Backup plugin for cPanel & WHM 1.9.3 HF3 and Backup extension for Plesk 1.8.11. A local attacker with low privileges could gain elevated access to backup data, control panels, and other customer accounts on shared hosting infrastructure.

Cyber Security Newsupdated 11:08 UTC · 2h agofirst 08:01 UTC · 5h agoExploit / PoC in the wild 6 sources CVE-2026-87886

CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks

CISA added the actively exploited Chromium V8 type confusion zero-day CVE-2026-85046 to its KEV catalog, urging patching of Chrome, Edge, and Opera.

CISA added CVE-2026-85046, a V8 type confusion flaw (CWE-843) in Chromium-based browsers, to its Known Exploited Vulnerabilities catalog. A remote attacker can trigger arbitrary code execution inside the browser sandbox via a specially crafted HTML page. Google Chrome is directly affected, and Microsoft Edge, Opera, and other Chromium-based browsers may also be impacted depending on their V8 version. Google has released a Stable channel Chrome update, and CISA directs mitigations under Binding Operational Directive 26-04.

Cyber Security NewsSep 8, 16:25 UTC · 7d agoExploit / PoC in the wildCVE-2026-85046

Search: “initial-access”

Acronis Plugin Vulnerability in cPanel and Plesk Exploited in the Wild

CISA Warns of Chromium Type Confusion 0-Day Vulnerability Actively Exploited in Attacks

AI agents are changing where cybersecurity seed funding lands

FSB Group Gamaredon Hides Worm in Windows Data Streams

Russian state threat group shifts focus to US, UK targets